Used TermSrv.dll Patcher from heldigard on my Windows 8.1 x64, but it seems to slow down my internet connection. How can I get and restore the original one ? Looking to the picture, can I delete the modified one and remove only the "old" from the orignal one ? Does it work?
Cool, more useful for coding this way (starting offset). Can someone confirm what hashes I am expecting to see ? Can no longer trust mine own eyes. Code: x86 Find 0x1550F 3B81200300000F84C0EC0100 Replace B80001000089812003000090 Find 0xA1B29 74 Replace EB Find 0x17428 43 Replace 90 ---------------------------------- x64 Find 0x56C29 39813C0600000F841B700000 Replace B80001000089813806000090 Find 0x80C24 0F84 Replace 90E9 Find 0x1F641 01 Replace 00 Guessing I will still need to do a full replacement starting from 0x56C23 (maijin3's begin offset) + 18 bits to be able to restore termsrv.dll to original condition no matter which older patches they've applied.
Sunstar: In post #142 you included: change 40 38 7D 7A 0F 85 CE 2E 08 00 to 40 38 7D 7A 90 E9 CE 2E 08 00 But that patch is missing from your latest list. Do we need to apply that patch or not?
That just showed additional patches, it didn't say to take any out. In any event, the way you just did it with all the accumulated patches on one page is great. I still had the one I questioned above applied to my DLL and it didn't seem to hurt anything, but now I will take it out just in case. Your patches have been running on multiple 8.1 and 2012R2 systems for weeks without any problems. You did an excellent job.
Finally got around to testing this. I get a file with this hash on x86 and it don't even work. File: termsrv.dll CRC-32: f958bca6 MD4: 9ad628e64e85ca6b70de1614d1db5494 MD5: c41639164c374ebcab80d3e126ec56d1 SHA-1: 118f58bd80382e712163bf8d118031182623f09f @ sunstar, did you mess up the patch or did I mess up the hex edit. Better yet, upload an actual file and I will test it.